adds a unique public token on user creation

Signed-off-by: Daniel Berry <daniel@danielberry.me>